EC-Council 712-50 Practice Exams
Last updated on Oct 23,2026- Exam Code: 712-50
- Exam Name: EC-Council Certified CISO (CCISO)
- Certification Provider: EC-Council
- Latest update: Oct 23,2026
Which of the following is the MOST important component of any change management process?
- A . Scheduling
- B . Back-out procedures
- C . Outage planning
- D . Management approval
An organization has defined a set of standard security controls. This organization has also defined the circumstances and conditions in which they must be applied.
What is the NEXT logical step in applying the controls in the organization?
- A . Determine the risk tolerance
- B . Perform an asset classification
- C . Create an architecture gap analysis
- D . Analyze existing controls on systems
SCENARIO:
A Chief Information Security Officer (CISO) recently had a third party conduct an audit of the security program. Internal policies and international standards were used as audit baselines. The audit report was presented to the CISO and a variety of high, medium and low rated gaps were identified.
After determining the audit findings are accurate, which of the following is the MOST logical next activity?
- A . Begin initial gap remediation analyses
- B . Review the security organization’s charter
- C . Validate gaps with the Information Technology team
- D . Create a briefing of the findings for executive management
The PRIMARY objective of security awareness is to:
- A . Ensure that security policies are read.
- B . Encourage security-conscious employee behavior.
- C . Meet legal and regulatory requirements.
- D . Put employees on notice in case follow-up action for noncompliance is necessary
Scenario: Your company has many encrypted telecommunications links for their world-wide operations. Physically distributing symmetric keys to all locations has proven to be administratively
burdensome, but symmetric keys are preferred to other alternatives.
Symmetric encryption in general is preferable to asymmetric encryption when:
- A . The number of unique communication links is large
- B . The volume of data being transmitted is small
- C . The speed of the encryption / deciphering process is essential
- D . The distance to the end node is farthest away
What oversight should the information security team have in the change management process for application security?
- A . Information security should be informed of changes to applications only
- B . Development team should tell the information security team about any application security flaws
- C . Information security should be aware of any significant application security changes and work with developer to test for vulnerabilities before changes are deployed in production
- D . Information security should be aware of all application changes and work with developers before changes are deployed in production
Which of the following is a countermeasure to prevent unauthorized database access from web applications?
- A . Session encryption
- B . Removing all stored procedures
- C . Input sanitization
- D . Library control
Which of the following is the MOST important reason for performing assessments of the security portfolio?
- A . To assure that the portfolio is aligned to the needs of the broader organization
- B . To create executive support of the portfolio
- C . To discover new technologies and processes for implementation within the portfolio
- D . To provide independent 3rd party reviews of security effectiveness
A CISO wants to change the defense strategy to ward off attackers. To accomplish this the CISO is looking to a strategy where attackers are lured into a zone of a safe network where attackers can be monitored, controlled, quarantined, or eradicated.
- A . Moderate investment
- B . Passive monitoring
- C . Integrated security controls
- D . Dynamic deception
What is the purpose of the statement of retained earnings of an organization?
- A . It represents the sum of all capital expenditures
- B . It represents the percentage of earnings that could in part be used to finance future security controls
- C . It represents the savings generated by the proper acquisition and implementation of security controls
- D . It has a direct correlation with the CISO’s budget